On 2/6/07, Alex Kapranoff <[EMAIL PROTECTED]> wrote:
Good day!

I searched the archives and didn't find anything. Were there
discussions about supporting weird IE quoting with backquotes
(<img alt=`a b c`>)?

I never heared a request for that before so I don't think so.

It seems that IE7 continues to implement it so HTML::Parser should
probably too at least with a non-default option.

Currently, it is parsed as <img alt="`a" b="b" c`="c`">.

What are the thoughts? Backquotes are mostly used in XSS exploits
nowadays and I have a hard time dealing with such attacks using
HTML::Parser.

It seems kind of harmless (and easy) to support this so I'm not oposing it.
What "rules" do IE follow when it can't find the matching ending backquote?

--
Gisle Aas

Reply via email to